Overview

overview

7

Static

static

1

1b8c38e513...ff.exe

windows7-x64

7

1b8c38e513...ff.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1b8c38e51320034c368bfbb313eca1ff

  • Size

    293KB

  • Sample

    231225-ns8sfseebk

  • MD5

    1b8c38e51320034c368bfbb313eca1ff

  • SHA1

    1de55838e8abec4571394e7d5dab5adefcd24be9

  • SHA256

    8a40e3660141f4cfdf61ec550aa51f3c303bc11af5bc55ac5a6cf735a8a143d5

  • SHA512

    1a6f171aeb026cb56a285e7c980b69591701f7453a0b390c0842f696dc440d7cf3d14aa10f9976d5b3394461f67f551246e3a039c92ef75fac2fcb66c3183c7a

  • SSDEEP

    6144:rPdMKMANEVzGlcEDUl4qaRYVQoJTGbusJRhgnGXc1D7Xm2BeddhMHdmHSC:rNEh8cSLqdfsisDhgnGyBBedDM9mHt

Score
7/10
persistence

Malware Config

Targets

    • Target

      1b8c38e51320034c368bfbb313eca1ff

    • Size

      293KB

    • MD5

      1b8c38e51320034c368bfbb313eca1ff

    • SHA1

      1de55838e8abec4571394e7d5dab5adefcd24be9

    • SHA256

      8a40e3660141f4cfdf61ec550aa51f3c303bc11af5bc55ac5a6cf735a8a143d5

    • SHA512

      1a6f171aeb026cb56a285e7c980b69591701f7453a0b390c0842f696dc440d7cf3d14aa10f9976d5b3394461f67f551246e3a039c92ef75fac2fcb66c3183c7a

    • SSDEEP

      6144:rPdMKMANEVzGlcEDUl4qaRYVQoJTGbusJRhgnGXc1D7Xm2BeddhMHdmHSC:rNEh8cSLqdfsisDhgnGyBBedDM9mHt

    Score
    7/10
    persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks